---
typeId: req
recordId: benac-trust-001
fields:
  title: Local trust required
  statement: A package shall not execute with real capabilities unless local policy has
    granted trust for that package, package interface, descriptor scope, invocation
    contract snapshot where relevant, initiating actor, requested capability scope, and
    relevant data class.
  rationale: Presence is not permission.
  verification: Imported untrusted package cannot execute with real capabilities.
  testable: true
  status: draft
  area: BENAC-TRUST
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.8 Trust and capability governance
  order: 88
---
